WP Manifestindependent plugin directory
manifest / developer / theme-check2

Theme Check2

Theme Check2 is a modern theme auditing plugin for WordPress themes.

by Kref Studio · github.com/villaingsk/theme-check2 · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/villaingsk/theme-check2/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/villaingsk/theme-check2 ↗

Description

Theme Check2 is a modern theme auditing plugin for WordPress themes.

It is designed more like an audit suite than the legacy Theme Check model:

  • Structured categories
  • Severity-based results
  • Static and runtime signals
  • Admin UI filters
  • JSON export
  • WP-CLI integration

Current check categories include:

  • General
  • Theme Repo
  • Security
  • Performance
  • Accessibility

Current capabilities include:

  • Static file collection for PHP, CSS, JS, JSON, block templates, and other assets
  • Runtime asset probe for the active theme
  • General metadata checks for style.css, theme.json, functions.php, screenshots, and text domain consistency
  • Theme repo checks for submission-oriented metadata, screenshot requirements, and Theme URI policy
  • Security heuristics for output escaping and input sanitization using token-based PHP analysis
  • Performance checks for remote assets, duplicate assets, large files, theme asset size, enqueue scope, footer loading, and CDN references
  • Accessibility checks such as .screen-reader-text support and accessibility-ready tag signaling

Theme Check2 currently exposes:

  • Admin screen under Tools > Theme Check2
  • Filterable scan results by severity and category
  • JSON export of the current filtered report
  • WP-CLI command: wp theme-check2 run <theme-slug>

Example WP-CLI usage: wp theme-check2 run twentytwentyfive wp theme-check2 run twentytwentyfive --format=json wp theme-check2 run twentytwentyfive --severity=warning --category=security

Important Notes

  • Runtime checks only run against the currently active theme.
  • Security findings are heuristics and should be reviewed by a developer before being treated as definitive vulnerabilities.
  • Theme Repo checks are intentionally separated from general engineering checks so commercial or internal themes can still use the plugin with less policy noise.

Installation

  1. Upload the plugin to /wp-content/plugins/theme-check2/
  2. Activate the plugin through the WordPress admin
  3. Open Tools > Theme Check2
  4. Select a theme and run a scan

Frequently Asked Questions

Is this a replacement for the legacy Theme Check plugin?

Not exactly. Theme Check2 is built as a modern audit-oriented checker with structured results, runtime probes, and export/CLI workflows. It can overlap with legacy Theme Check in some areas, but it is not a line-by-line clone.

Does it support WordPress.org theme review checks?

Partially. Theme Repo checks exist as their own category, but the plugin is not yet a full mirror of every historical WordPress.org review rule.

Can it scan inactive themes?

Yes for static checks. Runtime checks are only available for the active theme.

Can I automate scans?

Yes. Use the WP-CLI command or export JSON from the admin page.